last executing test programs: 1m15.777360246s ago: executing program 1 (id=3647): fallocate(0xffffffffffffffff, 0x1, 0x3, 0x5) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x26, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getgroups(0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r1}) setpriority(0x2, 0x0, 0x4) rseq(&(0x7f0000000540), 0x20, 0x0, 0x0) 1m14.931952975s ago: executing program 1 (id=3648): syz_init_net_socket$rose(0xb, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}, 0xffffffff}], 0x1, 0x10000, 0x0) 1m10.088888422s ago: executing program 1 (id=3665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, 0x0, 0x20040040) 1m9.621211616s ago: executing program 1 (id=3668): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0x10e0}}, 0x0) 1m8.140283891s ago: executing program 1 (id=3672): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3a090, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1010408, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 1m7.016615193s ago: executing program 1 (id=3677): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040f0409010104c8eea31e1af65b3d308b088e858ed276c50d78f4164a7063bd1aa504efa3d56f6647797bb182e891afe21df84dff1d7f406ab97d1182edf704527c023e48988758de3017fde42f12c1ee72fdcd65dc6ca1d0f92908aaafd8de9eab13d9e107000000795f83ca9772a6ea93bcb7ab7fd78687fe8af651fbd2a13d8604b745b2a5e6344ba20da7df3aadba73"], 0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000740)="66b783f0", 0x4}], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbc, 0xe9, 0xd9, 0x20, 0x2040, 0x7510, 0x6ddd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3b, 0x0, 0x0, 0xd9, 0x50, 0xdb}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) 50.848237049s ago: executing program 32 (id=3677): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040f0409010104c8eea31e1af65b3d308b088e858ed276c50d78f4164a7063bd1aa504efa3d56f6647797bb182e891afe21df84dff1d7f406ab97d1182edf704527c023e48988758de3017fde42f12c1ee72fdcd65dc6ca1d0f92908aaafd8de9eab13d9e107000000795f83ca9772a6ea93bcb7ab7fd78687fe8af651fbd2a13d8604b745b2a5e6344ba20da7df3aadba73"], 0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000740)="66b783f0", 0x4}], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbc, 0xe9, 0xd9, 0x20, 0x2040, 0x7510, 0x6ddd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3b, 0x0, 0x0, 0xd9, 0x50, 0xdb}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) 26.322735932s ago: executing program 3 (id=3786): syz_emit_ethernet(0x76, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa0100fe, @local}, @redirect={0x3, 0x0, 0x0, @local, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x1}, {}, {@dev, 0x1000}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) 26.059808807s ago: executing program 3 (id=3787): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@data_frame={@msdu=@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x4}, @from_mac=@broadcast, @broadcast, @device_a, {0xf, 0x4}, "", @value={0x0, 0x1, 0x3, 0x0, 0x7f}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x7a9) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000cc0), &(0x7f0000000d00)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x8}, @random="7a3c82680dfb", @device_b, @device_b, {0x9, 0x8}, "", @void, @value=@ver_80211n={0x0, 0xc, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}}, 0x1c) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4008084) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000013c0)={0x0}}, 0x811) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000001440)) r2 = socket$inet(0x2, 0x4, 0x3a275baf) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) pipe(0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002000)=@o_path={0x0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000020c0)=@bpf_lsm={0x1d, 0x18, &(0x7f0000001ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@alu={0x7, 0x1, 0x3, 0xc, 0x3, 0xa, 0xffffffffffffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x18405f880550f3db}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000001bc0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001c80)={0x0, 0x3, 0xf, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002040)=[0xffffffffffffffff], &(0x7f0000002080), 0x10, 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x10) writev(r0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002440)="5d2d06bcdeefd6302fd89b889944c73e67165c49e1ceab59d8abeb", 0x1b}, {&(0x7f0000002480)="546fa77cd68ee3cbb97ebfc45d5de76c0c32c3e642c1e99d941c8ba4e10b4a05193fc61f0a92ea333cfd8e8c5766e8707c44fd10f6a2f77f1b3e7d386cac1ce5ffeb2c3cf4c7294468e46e3493ce64f8b1098b47363363b15424493ab1", 0x5d}], 0x3) 25.408348084s ago: executing program 3 (id=3789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x32, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xa47c}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x5f}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 21.129413274s ago: executing program 3 (id=3797): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r1, &(0x7f0000000380)=""/46, 0xfffffeb4) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0xc, 0x3, 0x0, 0x0, @u64=0xf}]}]}, 0x2c}], 0x1}, 0x10) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 19.653375951s ago: executing program 3 (id=3801): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3a090, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1010408, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 19.397286144s ago: executing program 3 (id=3803): socket$rxrpc(0x21, 0x2, 0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) wait4(0x0, &(0x7f0000000140), 0x80000000, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) 13.386649932s ago: executing program 0 (id=3818): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_ADT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) sendto$inet6(r0, 0x0, 0x0, 0x2400c444, &(0x7f0000000300)={0xa, 0x4e1e, 0x9, @loopback, 0x1}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r3, &(0x7f0000000780)="a73e3e44d16e45439c1688f3fba86da57ec0c3c12dceec3c25fcb6c7b9dab17a0dab4097f2fc2784b6540f9e0a9bd0c9ef56aaa35c9a4a1b45d51f163eff65b084adb62d775567f12cc8114dc17e02b9480ecfd64a64e54d95f4a1d6ae7f221e324335c683e29f19af109693248051cf194e41aff8c5ea0b2bde0f24443fb79c106d61d66fca0c5874b5e055c54b60326655fdc7e204f1efcc6e9a49d7f2e4be6e801097dfb5f175e9c0d10c", &(0x7f0000000540)=""/12}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.462784103s ago: executing program 0 (id=3820): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x2) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x1}}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000000040)={{0x1}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000500)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x4040000) recvfrom$unix(r6, 0x0, 0x0, 0x40000010, 0x0, 0x0) 7.286735407s ago: executing program 0 (id=3822): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040f0409010104c8eea31e1af65b3d308b088e858ed276c50d78f4164a7063bd1aa504efa3d56f6647797bb182e891afe21df84dff1d7f406ab97d1182edf704527c023e48988758de3017fde42f12c1ee72fdcd65dc6ca1d0f92908aaafd8de9eab13d9e107000000795f83ca9772a6ea93bcb7ab7fd78687fe8af651fbd2a13d8604b745b2a5e6344ba20da7df3aadba73"], 0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000740)="66b783f0", 0x4}], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbc, 0xe9, 0xd9, 0x20, 0x2040, 0x7510, 0x6ddd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3b, 0x0, 0x0, 0xd9, 0x50, 0xdb}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) 7.272965917s ago: executing program 4 (id=3823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r3, 0x6a, 0x1, 0x0, 0x1) syz_usb_connect(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32=r2], 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, @void}, 0x10) syz_open_dev$loop(&(0x7f00000007c0), 0xffff, 0x2100) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r5, 0x1) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="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", 0x800}], 0x1, 0x0, 0x0, 0x10}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="3cf6230c996b991d4e543121bd811fe395ace2aad0175892f30d1be55ab7a95f0f4b228da3f6c9a2bec7880bb627f77425bc770c20f1e15a965c66dff4d3445fa12236", 0x43}, {0x0}, {&(0x7f00000001c0)="eec36146af16afa8486cb82aa23f107f4ff999dd16ae7e5c95e9661a062d0f3fe4ec30d0f7064a37c7bfe873884e", 0x2e}], 0x3, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r7, r5, r2, r8, r5, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0xb0, 0x20044080}}], 0x2, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x800822, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 7.248486401s ago: executing program 2 (id=3824): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r1 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0), 0x0) 7.1493459s ago: executing program 2 (id=3825): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r1, &(0x7f0000000880)=[{&(0x7f0000000680)=""/99, 0x63}, {&(0x7f0000000800)=""/110, 0x6e}], 0x2) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.135035675s ago: executing program 2 (id=3826): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_clone3(&(0x7f0000000440)={0x4000000, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240), {0x1f}, &(0x7f00000002c0)=""/72, 0x48, &(0x7f0000000340)=""/132, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) fcntl$lock(r2, 0x5, &(0x7f0000000280)={0x2, 0x1, 0xfffffffffffffffd, 0x1, r4}) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0x10, 0xfffffff8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) 3.625454612s ago: executing program 33 (id=3803): socket$rxrpc(0x21, 0x2, 0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) wait4(0x0, &(0x7f0000000140), 0x80000000, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) 3.601322761s ago: executing program 4 (id=3828): signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef35"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)="49138d2c", 0x1349}], 0x1}}], 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='k\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fddbdf2501000000080001", @ANYRES32=r3, @ANYBLOB="4800028044000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000001100"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) 2.38529971s ago: executing program 0 (id=3829): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 2.123011572s ago: executing program 2 (id=3830): ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, &(0x7f0000000580)={'veth1_to_bridge\x00', 0x400}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c444, &(0x7f0000000300)={0xa, 0x4e1e, 0x9, @loopback, 0x1}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.046706287s ago: executing program 0 (id=3831): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000240)="0284"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000940)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1040}], 0x0, 0x0, 0x0}) io_setup(0x81, 0x0) syz_io_uring_setup(0x7b9b, &(0x7f0000000300)={0x0, 0x0, 0x13090, 0x2, 0x2ee}, &(0x7f00000000c0), &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) 1.782086816s ago: executing program 4 (id=3832): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r1, &(0x7f0000000380)=""/46, 0xfffffeb4) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0xc, 0x3, 0x0, 0x0, @u64=0xf}, @generic]}]}, 0x2c}], 0x1}, 0x10) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.63634179s ago: executing program 2 (id=3833): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) 1.206289221s ago: executing program 4 (id=3834): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r1 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0), 0x0) 1.113282005s ago: executing program 4 (id=3835): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r1, &(0x7f0000000880)=[{&(0x7f0000000680)=""/99, 0x63}, {&(0x7f0000000800)=""/110, 0x6e}], 0x2) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.097873938s ago: executing program 4 (id=3836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r3, 0x6a, 0x1, 0x0, 0x1) syz_usb_connect(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32=r2], 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, @void}, 0x10) syz_open_dev$loop(&(0x7f00000007c0), 0xffff, 0x2100) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r5, 0x1) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="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", 0x800}], 0x1, 0x0, 0x0, 0x10}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="3cf6230c996b991d4e543121bd811fe395ace2aad0175892f30d1be55ab7a95f0f4b228da3f6c9a2bec7880bb627f77425bc770c20f1e15a965c66dff4d3445fa12236", 0x43}, {0x0}, {&(0x7f00000001c0)="eec36146af16afa8486cb82aa23f107f4ff999dd16ae7e5c95e9661a062d0f3fe4ec30d0f7064a37c7bfe873884e", 0x2e}], 0x3, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r7, r5, r2, r8, r5, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0xb0, 0x20044080}}], 0x2, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x800822, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 863.371483ms ago: executing program 2 (id=3837): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, '\\xroc/sys/fs/binfmt_misc/register\x00', 0x3a, '\x00', 0x3a, './bus/file0'}, 0x4e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004004}, 0x10000004) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, &(0x7f0000000300)) 0s ago: executing program 0 (id=3838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003800), 0x2, 0x0) writev(r3, &(0x7f0000001000)=[{&(0x7f0000000000)="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", 0x60e}], 0x1) kernel console output (not intermixed with test programs): s. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.640497][T15039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.644966][T15230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3017'. [ 710.689620][ T1237] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 710.808199][T15230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3017'. [ 710.858667][ T1237] usb 3-1: unable to get BOS descriptor or descriptor too short [ 710.859748][ T1237] usb 3-1: not running at top speed; connect to a high speed hub [ 710.865028][ T1237] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.865052][ T1237] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 710.869277][ T1237] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 710.869720][ T1237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.869740][ T1237] usb 3-1: Product: syz [ 710.869754][ T1237] usb 3-1: Manufacturer: syz [ 710.869767][ T1237] usb 3-1: SerialNumber: syz [ 711.121676][ T1237] usb 3-1: 0:2 : does not exist [ 711.140677][ T1237] usb 3-1: USB disconnect, device number 24 [ 711.690631][T15039] hsr_slave_0: entered promiscuous mode [ 711.692521][T15039] hsr_slave_1: entered promiscuous mode [ 711.695244][T15039] debugfs: 'hsr0' already exists in 'hsr' [ 711.695270][T15039] Cannot create hsr debugfs directory [ 712.007349][ T3560] batadv0: left promiscuous mode [ 713.379592][ T3560] hsr_slave_0: left promiscuous mode [ 713.419833][ T3560] hsr_slave_1: left promiscuous mode [ 714.845965][T15259] overlayfs: missing 'lowerdir' [ 718.965756][T15242] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 720.404440][T15279] lo speed is unknown, defaulting to 1000 [ 720.407158][T15279] lo speed is unknown, defaulting to 1000 [ 721.807504][T15292] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3036'. [ 724.788326][T15326] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3047'. [ 724.799567][ T6698] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 725.065515][ T6698] usb 3-1: unable to get BOS descriptor or descriptor too short [ 725.066478][ T6698] usb 3-1: not running at top speed; connect to a high speed hub [ 725.068753][ T6698] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.068777][ T6698] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 725.110431][ T6698] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 725.110463][ T6698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.110483][ T6698] usb 3-1: Product: syz [ 725.110497][ T6698] usb 3-1: Manufacturer: syz [ 725.110511][ T6698] usb 3-1: SerialNumber: syz [ 725.881099][ T6698] usb 3-1: 0:2 : does not exist [ 725.881189][ T6698] usb 3-1: unit 0 not found! [ 725.982667][ T6698] usb 3-1: USB disconnect, device number 25 [ 726.836193][T15354] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3056'. [ 726.836217][T15354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.068290][T15356] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3057'. [ 727.312650][T15039] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 727.410254][T15039] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 727.454145][T15039] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 727.530139][T15039] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 728.221287][T15039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.287480][T15039] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.351479][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.351647][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.392040][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.392194][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.660480][T15397] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3071'. [ 728.660506][T15397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 730.412165][T15039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.612126][T15039] veth0_vlan: entered promiscuous mode [ 730.642073][T15039] veth1_vlan: entered promiscuous mode [ 730.825306][T15039] veth0_macvtap: entered promiscuous mode [ 730.929225][T15039] veth1_macvtap: entered promiscuous mode [ 731.003362][T15438] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3084'. [ 731.003397][T15438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 731.122140][T15039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.329524][T15039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.377927][T13708] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.384880][T13708] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.412134][T13708] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.436322][T13708] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.003698][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.003721][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.029590][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 732.359833][ T1808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.359878][ T1808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.545608][T15493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2956'. [ 733.715697][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2956'. [ 735.383921][T15041] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 735.413798][T15041] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 735.416766][T15041] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 735.419078][T15041] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 735.508834][T15041] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 737.204539][T15538] overlayfs: failed to resolve './file1': -2 [ 737.629513][ T5844] Bluetooth: hci1: command tx timeout [ 738.064932][T15515] lo speed is unknown, defaulting to 1000 [ 738.066302][T15515] lo speed is unknown, defaulting to 1000 [ 739.087502][T15575] overlayfs: failed to resolve './file1': -2 [ 740.385924][ T5844] Bluetooth: hci1: command tx timeout [ 740.688321][T15599] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3124'. [ 742.437907][ T5844] Bluetooth: hci1: command tx timeout [ 742.448037][T15618] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3129'. [ 742.448058][T15618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 742.991278][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 742.991295][ T37] audit: type=1326 audit(1757867962.537:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15637 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3630b5eba9 code=0x7ffc0000 [ 742.993267][ T37] audit: type=1326 audit(1757867962.537:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15637 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3630b5eba9 code=0x7ffc0000 [ 742.994500][ T37] audit: type=1326 audit(1757867962.537:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15637 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f3630b5eba9 code=0x7ffc0000 [ 742.994619][ T37] audit: type=1326 audit(1757867962.537:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15637 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3630b5eba9 code=0x7ffc0000 [ 742.998240][ T37] audit: type=1326 audit(1757867962.537:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15637 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3630b5eba9 code=0x7ffc0000 [ 742.998585][ T37] audit: type=1326 audit(1757867962.537:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15637 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3630b5eba9 code=0x7ffc0000 [ 742.998952][ T37] audit: type=1326 audit(1757867962.537:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15637 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3630b5eba9 code=0x7ffc0000 [ 742.999176][ T37] audit: type=1326 audit(1757867962.537:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15637 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3630b5eba9 code=0x7ffc0000 [ 743.181627][ T37] audit: type=1326 audit(1757867962.537:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15637 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3630b5eba9 code=0x7ffc0000 [ 743.207171][ T5929] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 743.261266][ T5929] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 743.937721][T15515] chnl_net:caif_netlink_parms(): no params data found [ 744.028114][ T37] audit: type=1326 audit(1757867963.567:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15637 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3630b5eba9 code=0x7ffc0000 [ 744.129526][T15463] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 745.312894][ T5844] Bluetooth: hci1: command tx timeout [ 745.316730][T15463] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.316794][T15463] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 745.316817][T15463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.347698][T15645] siw: device registration error -23 [ 745.372837][T15463] usb 2-1: config 0 descriptor?? [ 745.394048][T15463] pwc: Askey VC010 type 2 USB webcam detected. [ 745.988927][T15463] pwc: recv_control_msg error -32 req 02 val 2b00 [ 746.002681][T15463] pwc: recv_control_msg error -32 req 02 val 2700 [ 746.009171][T15463] pwc: recv_control_msg error -32 req 02 val 2c00 [ 746.024293][T15463] pwc: recv_control_msg error -32 req 04 val 1000 [ 746.026094][T15463] pwc: recv_control_msg error -32 req 04 val 1300 [ 746.026825][T15463] pwc: recv_control_msg error -32 req 04 val 1400 [ 746.027563][T15463] pwc: recv_control_msg error -32 req 02 val 2000 [ 746.063547][T15463] pwc: recv_control_msg error -32 req 02 val 2100 [ 746.270588][T15463] pwc: recv_control_msg error -71 req 02 val 2500 [ 746.271119][T15463] pwc: recv_control_msg error -71 req 02 val 2400 [ 746.271770][T15463] pwc: recv_control_msg error -71 req 02 val 2600 [ 746.272164][T15463] pwc: recv_control_msg error -71 req 02 val 2900 [ 746.272532][T15463] pwc: recv_control_msg error -71 req 02 val 2800 [ 746.274210][T15463] pwc: recv_control_msg error -71 req 04 val 1100 [ 746.274610][T15463] pwc: recv_control_msg error -71 req 04 val 1200 [ 746.431440][T15463] pwc: Registered as video103. [ 746.494483][T15463] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 746.607298][T15463] usb 2-1: USB disconnect, device number 33 [ 746.845610][T15683] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3143'. [ 746.910035][T15683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 747.395253][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.395328][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.243245][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 748.243262][ T37] audit: type=1326 audit(1757867967.777:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15708 comm="syz.4.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 748.243377][ T37] audit: type=1326 audit(1757867967.777:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15708 comm="syz.4.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 748.243403][ T37] audit: type=1326 audit(1757867967.777:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15708 comm="syz.4.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 748.243425][ T37] audit: type=1326 audit(1757867967.777:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15708 comm="syz.4.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 748.243446][ T37] audit: type=1326 audit(1757867967.787:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15708 comm="syz.4.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 748.243468][ T37] audit: type=1326 audit(1757867967.787:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15708 comm="syz.4.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 748.243495][ T37] audit: type=1326 audit(1757867967.787:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15708 comm="syz.4.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 748.243517][ T37] audit: type=1326 audit(1757867967.787:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15708 comm="syz.4.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 748.243539][ T37] audit: type=1326 audit(1757867967.787:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15708 comm="syz.4.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 748.243561][ T37] audit: type=1326 audit(1757867967.787:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15708 comm="syz.4.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 748.251788][ T5929] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 748.501282][ T5929] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 749.460938][ T6698] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 749.809607][ T6698] usb 4-1: device descriptor read/64, error -71 [ 749.995089][T15716] siw: device registration error -23 [ 750.049474][ T6698] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 750.187585][ T6698] usb 4-1: device descriptor read/64, error -71 [ 750.204385][ T1428] dvmrp8 (unregistering): left allmulticast mode [ 750.290191][ T6698] usb usb4-port1: attempt power cycle [ 750.629576][ T6698] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 750.650223][ T6698] usb 4-1: device descriptor read/8, error -71 [ 750.899493][ T6698] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 750.920260][ T6698] usb 4-1: device descriptor read/8, error -71 [ 751.035759][ T6698] usb usb4-port1: unable to enumerate USB device [ 751.967824][ T1428] bond0 (unregistering): Released all slaves [ 752.026018][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3157'. [ 752.050102][T15515] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.050250][T15515] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.050491][T15515] bridge_slave_0: entered allmulticast mode [ 752.053362][T15515] bridge_slave_0: entered promiscuous mode [ 752.219865][T15728] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3157'. [ 752.239444][T15728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 752.248395][T15515] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.248531][T15515] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.248769][T15515] bridge_slave_1: entered allmulticast mode [ 752.270204][T15515] bridge_slave_1: entered promiscuous mode [ 752.664540][ T1428] tipc: Left network mode [ 753.102031][T15515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.479913][ T6687] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 753.640152][ T6687] usb 1-1: device descriptor read/64, error -71 [ 753.890232][ T6687] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 753.992511][T15515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.019488][ T6687] usb 1-1: device descriptor read/64, error -71 [ 754.130200][ T6687] usb usb1-port1: attempt power cycle [ 754.270290][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 754.270307][ T37] audit: type=1326 audit(1757867973.817:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15757 comm="syz.4.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 754.270561][ T37] audit: type=1326 audit(1757867973.817:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15757 comm="syz.4.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 754.270967][ T37] audit: type=1326 audit(1757867973.817:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15757 comm="syz.4.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 754.271320][ T37] audit: type=1326 audit(1757867973.817:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15757 comm="syz.4.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 754.271800][ T37] audit: type=1326 audit(1757867973.817:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15757 comm="syz.4.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 754.272098][ T37] audit: type=1326 audit(1757867973.817:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15757 comm="syz.4.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 754.272544][ T37] audit: type=1326 audit(1757867973.817:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15757 comm="syz.4.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 754.272876][ T37] audit: type=1326 audit(1757867973.817:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15757 comm="syz.4.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 754.273141][ T37] audit: type=1326 audit(1757867973.817:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15757 comm="syz.4.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 754.273405][ T37] audit: type=1326 audit(1757867973.817:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15757 comm="syz.4.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 754.304700][ T6698] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 754.314945][ T6698] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 754.479456][ T6687] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 754.500204][ T6687] usb 1-1: device descriptor read/8, error -71 [ 754.607587][T15748] alle: renamed from bridge_slave_0 (while UP) [ 754.680468][T15748] bridge0: port 1(alle) entered disabled state [ 754.739489][ T6687] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 754.762457][ T6687] usb 1-1: device descriptor read/8, error -71 [ 754.870066][ T6687] usb usb1-port1: unable to enumerate USB device [ 755.087910][T15768] siw: device registration error -23 [ 755.192674][T15515] team0: Port device team_slave_0 added [ 755.300612][T15515] team0: Port device team_slave_1 added [ 755.372894][T15772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3173'. [ 755.618615][T15773] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3173'. [ 755.656982][T15773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 757.169583][ T1428] hsr_slave_0: left promiscuous mode [ 757.216564][ T1428] hsr_slave_1: left promiscuous mode [ 762.060444][ T1428] dummy0 (unregistering): left promiscuous mode [ 762.124992][ T1428] team0 (unregistering): Port device dummy0 removed [ 763.336475][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 763.336495][ T37] audit: type=1326 audit(1757867982.877:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15814 comm="syz.1.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5bffeba9 code=0x7ffc0000 [ 763.337122][ T37] audit: type=1326 audit(1757867982.877:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15814 comm="syz.1.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fec5bffeba9 code=0x7ffc0000 [ 763.337567][ T37] audit: type=1326 audit(1757867982.877:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15814 comm="syz.1.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5bffeba9 code=0x7ffc0000 [ 763.338037][ T37] audit: type=1326 audit(1757867982.877:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15814 comm="syz.1.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec5bffeba9 code=0x7ffc0000 [ 763.338305][ T37] audit: type=1326 audit(1757867982.877:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15814 comm="syz.1.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5bffeba9 code=0x7ffc0000 [ 763.338536][ T37] audit: type=1326 audit(1757867982.877:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15814 comm="syz.1.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5bffeba9 code=0x7ffc0000 [ 763.338585][ T37] audit: type=1326 audit(1757867982.877:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15814 comm="syz.1.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fec5bffeba9 code=0x7ffc0000 [ 763.338705][ T37] audit: type=1326 audit(1757867982.877:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15814 comm="syz.1.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5bffeba9 code=0x7ffc0000 [ 763.338849][ T37] audit: type=1326 audit(1757867982.877:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15814 comm="syz.1.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec5bffeba9 code=0x7ffc0000 [ 763.339011][ T37] audit: type=1326 audit(1757867982.877:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15814 comm="syz.1.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec5bffeba9 code=0x7ffc0000 [ 763.354162][T15463] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 763.356910][T15463] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 763.725513][T15515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.725530][T15515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.725556][T15515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.805141][T15806] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.952330][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3185'. [ 764.256109][T15515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.256127][T15515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.256153][T15515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.258064][T15826] lo speed is unknown, defaulting to 1000 [ 764.677347][T15463] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 764.830194][T15463] usb 4-1: device descriptor read/64, error -71 [ 765.079864][T15463] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 765.203434][T15806] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.210319][T15463] usb 4-1: device descriptor read/64, error -71 [ 765.314953][T15826] lo speed is unknown, defaulting to 1000 [ 765.321229][T15463] usb usb4-port1: attempt power cycle [ 765.343102][T15826] lo speed is unknown, defaulting to 1000 [ 765.414745][T15826] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 765.613684][T15826] lo speed is unknown, defaulting to 1000 [ 765.669570][T15463] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 765.709587][T15463] usb 4-1: device descriptor read/8, error -71 [ 766.067281][T15463] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 766.080284][T15463] usb 4-1: device descriptor read/8, error -71 [ 766.153576][T15806] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.209893][T15463] usb usb4-port1: unable to enumerate USB device [ 766.361459][T15826] lo speed is unknown, defaulting to 1000 [ 766.395800][T15515] hsr_slave_0: entered promiscuous mode [ 766.421677][T15515] hsr_slave_1: entered promiscuous mode [ 766.480269][T15826] lo speed is unknown, defaulting to 1000 [ 766.518343][T15826] lo speed is unknown, defaulting to 1000 [ 766.557909][T15806] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.683939][T15826] lo speed is unknown, defaulting to 1000 [ 767.529474][ T6690] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 767.597300][ T3592] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.742136][ T6690] usb 4-1: Using ep0 maxpacket: 32 [ 767.744098][ T6690] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 767.744114][ T6690] usb 4-1: config 0 has no interface number 0 [ 767.744144][ T6690] usb 4-1: config 0 interface 230 has no altsetting 0 [ 767.764253][ T6690] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 767.764284][ T6690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.764303][ T6690] usb 4-1: Product: syz [ 767.764317][ T6690] usb 4-1: Manufacturer: syz [ 767.764330][ T6690] usb 4-1: SerialNumber: syz [ 767.830980][ T6690] usb 4-1: config 0 descriptor?? [ 768.102964][ T6690] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 768.215888][ T6690] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 768.263006][T13708] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.514968][ T6690] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 768.589127][ T6690] usb 4-1: USB disconnect, device number 29 [ 768.706833][ T43] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.845873][ T67] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.538361][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 769.538379][ T37] audit: type=1326 audit(1757867989.077:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15871 comm="syz.4.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 769.538695][ T37] audit: type=1326 audit(1757867989.077:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15871 comm="syz.4.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 769.539068][ T37] audit: type=1326 audit(1757867989.077:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15871 comm="syz.4.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 769.539860][ T37] audit: type=1326 audit(1757867989.077:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15871 comm="syz.4.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 769.540168][ T37] audit: type=1326 audit(1757867989.087:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15871 comm="syz.4.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 769.540670][ T37] audit: type=1326 audit(1757867989.087:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15871 comm="syz.4.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 769.541022][ T37] audit: type=1326 audit(1757867989.087:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15871 comm="syz.4.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 769.541308][ T37] audit: type=1326 audit(1757867989.087:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15871 comm="syz.4.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 769.541647][ T37] audit: type=1326 audit(1757867989.087:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15871 comm="syz.4.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 769.541944][ T37] audit: type=1326 audit(1757867989.087:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15871 comm="syz.4.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 770.528178][ T6687] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 770.541021][ T6687] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 772.673700][ T5915] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 773.264032][ T1428] IPVS: stop unused estimator thread 0... [ 773.846798][T15894] batadv_slave_1: entered promiscuous mode [ 774.583334][ T6687] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 774.789738][ T6687] usb 1-1: Using ep0 maxpacket: 32 [ 774.802176][ T6687] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 774.802204][ T6687] usb 1-1: config 0 has no interface number 0 [ 774.802254][ T6687] usb 1-1: config 0 interface 230 has no altsetting 0 [ 774.810000][ T6687] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 774.810030][ T6687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.810048][ T6687] usb 1-1: Product: syz [ 774.810061][ T6687] usb 1-1: Manufacturer: syz [ 774.810074][ T6687] usb 1-1: SerialNumber: syz [ 774.815323][ T6687] usb 1-1: config 0 descriptor?? [ 774.827920][ T6687] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 774.841349][ T6687] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 775.058638][T15892] batadv_slave_1: left promiscuous mode [ 775.255762][ T6687] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 775.289407][ T6687] usb 1-1: USB disconnect, device number 26 [ 776.659651][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 776.659674][ T37] audit: type=1326 audit(1757867996.157:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15923 comm="syz.3.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161e48eba9 code=0x7ffc0000 [ 776.790211][ T37] audit: type=1326 audit(1757867996.337:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15923 comm="syz.3.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161e48eba9 code=0x7ffc0000 [ 776.790262][ T37] audit: type=1326 audit(1757867996.337:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15923 comm="syz.3.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f161e48eba9 code=0x7ffc0000 [ 776.790303][ T37] audit: type=1326 audit(1757867996.337:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15923 comm="syz.3.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161e48eba9 code=0x7ffc0000 [ 776.790343][ T37] audit: type=1326 audit(1757867996.337:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15923 comm="syz.3.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161e48eba9 code=0x7ffc0000 [ 776.798807][ T37] audit: type=1326 audit(1757867996.337:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15923 comm="syz.3.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f161e48eba9 code=0x7ffc0000 [ 776.798859][ T37] audit: type=1326 audit(1757867996.337:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15923 comm="syz.3.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161e48eba9 code=0x7ffc0000 [ 776.798899][ T37] audit: type=1326 audit(1757867996.337:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15923 comm="syz.3.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161e48eba9 code=0x7ffc0000 [ 776.798939][ T37] audit: type=1326 audit(1757867996.337:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15923 comm="syz.3.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f161e48eba9 code=0x7ffc0000 [ 776.798980][ T37] audit: type=1326 audit(1757867996.337:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15923 comm="syz.3.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161e48eba9 code=0x7ffc0000 [ 777.200239][ T5915] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 777.834441][T15463] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 777.859957][T15463] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 777.879448][ T5915] usb 5-1: device descriptor read/64, error -71 [ 777.973669][T15515] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 778.024565][T15515] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 778.082357][T15515] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 778.119441][ T5915] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 778.181709][T15515] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 778.280552][ T5915] usb 5-1: device descriptor read/64, error -71 [ 778.405334][ T5915] usb usb5-port1: attempt power cycle [ 778.632964][T15515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.704546][T15515] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.721749][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.722604][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.748090][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.748396][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.759553][ T5915] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 778.881015][ T5915] usb 5-1: device descriptor read/8, error -71 [ 779.119604][ T5915] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 779.140338][ T5915] usb 5-1: device descriptor read/8, error -71 [ 779.250110][ T5915] usb usb5-port1: unable to enumerate USB device [ 779.895281][T15515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.932801][T15966] batadv_slave_1: entered promiscuous mode [ 780.063978][T15515] veth0_vlan: entered promiscuous mode [ 781.022407][ T5915] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 781.189462][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 781.194874][ T5915] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 781.194901][ T5915] usb 1-1: config 0 has no interface number 0 [ 781.194947][ T5915] usb 1-1: config 0 interface 230 has no altsetting 0 [ 781.198136][ T5915] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 781.198164][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.198182][ T5915] usb 1-1: Product: syz [ 781.198195][ T5915] usb 1-1: Manufacturer: syz [ 781.198207][ T5915] usb 1-1: SerialNumber: syz [ 781.199062][T15515] veth1_vlan: entered promiscuous mode [ 781.274403][ T5915] usb 1-1: config 0 descriptor?? [ 781.295856][ T5915] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 781.328823][ T5915] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 781.568229][T15965] batadv_slave_1: left promiscuous mode [ 781.583304][T15515] veth0_macvtap: entered promiscuous mode [ 781.615939][T15515] veth1_macvtap: entered promiscuous mode [ 781.639439][ T5915] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 781.660074][ T5915] usb 1-1: USB disconnect, device number 27 [ 781.705136][T15515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.733440][T15515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.817271][ T1808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.818464][ T1808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.830787][ T1808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.833179][ T1808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.310430][ T5844] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 783.490644][ T37] kauditd_printk_skb: 53 callbacks suppressed [ 783.490660][ T37] audit: type=1326 audit(1757868003.037:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15984 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 783.490696][ T37] audit: type=1326 audit(1757868003.037:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15984 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 783.499174][ T37] audit: type=1326 audit(1757868003.037:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15984 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 783.499227][ T37] audit: type=1326 audit(1757868003.037:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15984 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 783.499263][ T37] audit: type=1326 audit(1757868003.037:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15984 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 783.519470][ T37] audit: type=1326 audit(1757868003.057:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15984 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 783.519519][ T37] audit: type=1326 audit(1757868003.057:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15984 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 783.519771][ T37] audit: type=1326 audit(1757868003.067:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15984 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 783.544430][ T37] audit: type=1326 audit(1757868003.087:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15984 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 783.544485][ T37] audit: type=1326 audit(1757868003.087:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15984 comm="syz.4.3227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1e22eba9 code=0x7ffc0000 [ 783.580060][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.580083][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.581269][ T6690] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 783.594926][T15463] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 783.597364][ T6690] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 783.741978][T15463] usb 1-1: config 0 has an invalid interface number: 59 but max is 0 [ 783.742005][T15463] usb 1-1: config 0 has no interface number 0 [ 783.745027][T15463] usb 1-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=6d.dd [ 783.745054][T15463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.745073][T15463] usb 1-1: Product: syz [ 783.745085][T15463] usb 1-1: Manufacturer: syz [ 783.745098][T15463] usb 1-1: SerialNumber: syz [ 783.752810][T15463] usb 1-1: config 0 descriptor?? [ 783.770719][T15463] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 784.131108][T15990] netlink: 'syz.0.3228': attribute type 1 has an invalid length. [ 784.464771][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.464793][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.027951][ T2366] usb 1-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 785.027977][ T2366] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 785.032778][T15463] usb 1-1: USB disconnect, device number 28 [ 785.267391][T15986] siw: device registration error -23 [ 789.515673][T16026] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3242'. [ 789.577925][T15041] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 789.597157][T15041] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 789.598506][T15041] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 789.628707][T15041] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 789.637745][T15041] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 789.763317][T16030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3241'. [ 789.763435][T16030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.349478][ T5929] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 791.224106][ T5929] usb 3-1: unable to get BOS descriptor or descriptor too short [ 791.224871][ T5929] usb 3-1: not running at top speed; connect to a high speed hub [ 791.226445][ T5929] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 791.226467][ T5929] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 791.294143][ T5929] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 791.294174][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.294194][ T5929] usb 3-1: Product: syz [ 791.294207][ T5929] usb 3-1: Manufacturer: syz [ 791.294221][ T5929] usb 3-1: SerialNumber: syz [ 791.624993][ T5929] usb 3-1: 0:2 : does not exist [ 791.679718][ T5929] usb 3-1: USB disconnect, device number 26 [ 791.709550][ T5844] Bluetooth: hci0: command tx timeout [ 792.207285][T16061] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3252'. [ 792.894966][T16073] random: crng reseeded on system resumption [ 792.976198][ T1428] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.113575][T16078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3258'. [ 793.113685][T16078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.439781][ T5844] Bluetooth: hci0: command tx timeout [ 794.494190][T16028] lo speed is unknown, defaulting to 1000 [ 794.498733][T16028] lo speed is unknown, defaulting to 1000 [ 794.931568][T16088] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3262'. [ 795.125803][ T1428] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.436785][ T1428] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.512054][ T5844] Bluetooth: hci0: command tx timeout [ 796.830245][ T5760] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 797.687443][ T5760] usb 3-1: config 0 has an invalid interface number: 59 but max is 0 [ 797.687462][ T5760] usb 3-1: config 0 has no interface number 0 [ 797.704850][ T5760] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=6d.dd [ 797.704880][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.704901][ T5760] usb 3-1: Product: syz [ 797.704915][ T5760] usb 3-1: Manufacturer: syz [ 797.704928][ T5760] usb 3-1: SerialNumber: syz [ 797.778054][ T5760] usb 3-1: config 0 descriptor?? [ 797.792231][ T5760] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 797.875429][ T1428] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.590051][ T5844] Bluetooth: hci0: command tx timeout [ 798.623739][T16128] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3274'. [ 798.729183][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3276'. [ 798.738912][T16125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.007430][ T5760] usb 3-1: USB disconnect, device number 27 [ 799.010469][ T5760] pvrusb2: Device being rendered inoperable [ 799.527802][T16028] chnl_net:caif_netlink_parms(): no params data found [ 805.474343][T16186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3294'. [ 805.474447][T16186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.750870][T16198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3298'. [ 806.970747][ T1428] dvmrp8 (unregistering): left allmulticast mode [ 808.313272][ T1428] bond0 (unregistering): Released all slaves [ 808.330969][ T1428] bond1 (unregistering): Released all slaves [ 808.463691][T16192] lo speed is unknown, defaulting to 1000 [ 808.466396][T16192] lo speed is unknown, defaulting to 1000 [ 808.535474][T16028] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.535762][T16028] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.536002][T16028] bridge_slave_0: entered allmulticast mode [ 808.573468][T16028] bridge_slave_0: entered promiscuous mode [ 808.846488][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.846556][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.938278][ T1428] tipc: Left network mode [ 808.938499][T16028] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.938669][T16028] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.938902][T16028] bridge_slave_1: entered allmulticast mode [ 808.948170][T16028] bridge_slave_1: entered promiscuous mode [ 809.070543][T14833] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 809.156460][T16215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3305'. [ 809.220197][T16212] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3304'. [ 809.224597][T16212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 809.242814][T14833] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.242870][T14833] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 809.242893][T14833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.255532][T14833] usb 3-1: config 0 descriptor?? [ 809.276308][T14833] pwc: Askey VC010 type 2 USB webcam detected. [ 809.557384][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3307'. [ 809.557577][T16220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 809.733072][T16028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.774138][T14833] pwc: recv_control_msg error -32 req 02 val 2b00 [ 809.774898][T14833] pwc: recv_control_msg error -32 req 02 val 2700 [ 809.776205][T14833] pwc: recv_control_msg error -32 req 02 val 2c00 [ 809.777027][T14833] pwc: recv_control_msg error -32 req 04 val 1000 [ 809.778021][T14833] pwc: recv_control_msg error -32 req 04 val 1300 [ 809.786917][T14833] pwc: recv_control_msg error -32 req 04 val 1400 [ 809.829406][T14833] pwc: recv_control_msg error -32 req 02 val 2000 [ 809.855798][T14833] pwc: recv_control_msg error -32 req 02 val 2100 [ 809.865476][T16028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.937690][T16227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3308'. [ 810.088887][T14833] pwc: recv_control_msg error -71 req 02 val 2500 [ 810.092747][T14833] pwc: recv_control_msg error -71 req 02 val 2400 [ 810.093288][T14833] pwc: recv_control_msg error -71 req 02 val 2600 [ 810.093833][T14833] pwc: recv_control_msg error -71 req 02 val 2900 [ 810.094289][T14833] pwc: recv_control_msg error -71 req 02 val 2800 [ 810.095029][T14833] pwc: recv_control_msg error -71 req 04 val 1100 [ 810.095473][T14833] pwc: recv_control_msg error -71 req 04 val 1200 [ 810.109247][T14833] pwc: Registered as video103. [ 810.205872][T14833] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 810.228513][T14833] usb 3-1: USB disconnect, device number 28 [ 810.236216][T16226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3310'. [ 810.821819][T16246] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3316'. [ 810.821845][T16246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 810.918315][T16028] team0: Port device team_slave_0 added [ 810.978144][T16028] team0: Port device team_slave_1 added [ 811.521156][ T1428] hsr_slave_0: left promiscuous mode [ 811.809585][ T1428] hsr_slave_1: left promiscuous mode [ 811.874156][T16256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3320'. [ 811.874271][T16256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 811.900437][T16260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3321'. [ 811.930630][ T1428] team0: left allmulticast mode [ 812.020013][ T1428] veth1_macvtap: left promiscuous mode [ 812.020226][ T1428] veth0_macvtap: left promiscuous mode [ 812.020750][ T1428] veth1_vlan: left promiscuous mode [ 812.021045][ T1428] veth0_vlan: left promiscuous mode [ 818.162887][T16257] lo speed is unknown, defaulting to 1000 [ 818.164870][T16028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.164883][T16028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.164905][T16028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.332929][ T1237] lo speed is unknown, defaulting to 1000 [ 818.332958][ T1237] infiniband syz2: ib_query_port failed (-19) [ 818.370055][T16028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.370073][T16028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.370099][T16028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.990327][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3331'. [ 819.061075][T16291] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3330'. [ 819.090636][T16028] hsr_slave_0: entered promiscuous mode [ 819.092320][T16028] hsr_slave_1: entered promiscuous mode [ 819.099346][T16028] debugfs: 'hsr0' already exists in 'hsr' [ 819.099372][T16028] Cannot create hsr debugfs directory [ 819.569044][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3332'. [ 819.569171][T16301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.569471][T16305] alle: renamed from bridge_slave_0 (while UP) [ 820.632678][T16305] bridge0: port 1(alle) entered disabled state [ 821.195945][T15041] Bluetooth: hci5: command 0x0406 tx timeout [ 824.967612][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3342'. [ 824.967715][T16337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 825.615138][T16351] lo speed is unknown, defaulting to 1000 [ 825.712710][T16355] syzkaller0: entered promiscuous mode [ 825.712744][T16355] syzkaller0: entered allmulticast mode [ 830.719071][T16028] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 830.849437][T16028] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 830.999730][T16028] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 831.122490][T16028] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 831.150865][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3356'. [ 831.150970][T16381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 831.963103][T16397] lo speed is unknown, defaulting to 1000 [ 834.220375][T16028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.287319][T16028] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.375350][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.375505][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.439222][T16084] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.439463][T16084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.567374][T16424] random: crng reseeded on system resumption [ 837.523614][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3367'. [ 838.140325][T16444] vxcan1 speed is unknown, defaulting to 1000 [ 838.181543][T16444] vxcan1 speed is unknown, defaulting to 1000 [ 838.229090][T16444] vxcan1 speed is unknown, defaulting to 1000 [ 838.745513][T16444] infiniband syz2: set active [ 838.745528][T16444] infiniband syz2: added vxcan1 [ 838.748921][T16444] syz2: rxe_create_cq: returned err = -12 [ 838.748966][T16444] infiniband syz2: Couldn't create ib_mad CQ [ 838.749081][T16444] infiniband syz2: Couldn't open port 1 [ 838.762480][T14833] vxcan1 speed is unknown, defaulting to 1000 [ 838.827326][T16444] RDS/IB: syz2: added [ 838.828321][T16444] smc: adding ib device syz2 with port count 1 [ 838.828634][T16444] smc: ib device syz2 port 1 has pnetid [ 838.835410][T16444] vxcan1 speed is unknown, defaulting to 1000 [ 838.989331][ T1237] vxcan1 speed is unknown, defaulting to 1000 [ 839.066994][T16444] vxcan1 speed is unknown, defaulting to 1000 [ 839.233478][T16444] vxcan1 speed is unknown, defaulting to 1000 [ 839.398742][T16444] vxcan1 speed is unknown, defaulting to 1000 [ 839.566456][T16444] vxcan1 speed is unknown, defaulting to 1000 [ 840.199904][T16457] lo speed is unknown, defaulting to 1000 [ 840.220598][T16457] vxcan1 speed is unknown, defaulting to 1000 [ 840.278420][T16028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.379957][T16462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3379'. [ 840.593536][T16028] veth0_vlan: entered promiscuous mode [ 840.661695][T16028] veth1_vlan: entered promiscuous mode [ 840.970682][T16474] syzkaller0: entered promiscuous mode [ 840.970714][T16474] syzkaller0: entered allmulticast mode [ 840.973438][T16475] syzkaller0: entered promiscuous mode [ 840.973465][T16475] syzkaller0: entered allmulticast mode [ 841.177435][T16476] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3384'. [ 841.178231][T16477] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3385'. [ 841.192759][T16028] veth0_macvtap: entered promiscuous mode [ 841.821464][T16028] veth1_macvtap: entered promiscuous mode [ 842.015773][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3389'. [ 842.181035][T16028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.273170][T16028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.347070][ T3592] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.348023][ T3592] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.373036][ T3592] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.374534][ T3592] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.425220][T16495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3391'. [ 843.004105][ T1808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.004124][ T1808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.327315][ T1428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.327338][ T1428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.440749][T16507] netlink: 'syz.0.3395': attribute type 1 has an invalid length. [ 843.440798][T16507] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3395'. [ 844.276006][T16508] syzkaller0: entered promiscuous mode [ 844.276037][T16508] syzkaller0: entered allmulticast mode [ 844.419684][T16511] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3396'. [ 845.829879][T16519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3399'. [ 845.829908][T16519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3399'. [ 845.889440][ T1237] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 846.029741][ T1237] usb 4-1: device descriptor read/64, error -71 [ 846.269597][ T1237] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 846.399671][ T1237] usb 4-1: device descriptor read/64, error -71 [ 847.458468][ T1237] usb usb4-port1: attempt power cycle [ 847.693738][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3408'. [ 847.693936][T16548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 847.821661][T15041] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 847.846399][T15041] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 847.847742][T15041] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 847.891404][T15041] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 847.895085][T15041] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 848.219918][ T1237] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 848.277467][ T1237] usb 4-1: Using ep0 maxpacket: 16 [ 849.144570][ T1237] usb 4-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 849.144614][ T1237] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 40, using maximum allowed: 30 [ 849.144655][ T1237] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 40 [ 849.144697][ T1237] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 849.144725][ T1237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.192553][ T1237] usb 4-1: config 0 descriptor?? [ 851.220272][T15041] Bluetooth: hci3: command tx timeout [ 851.501720][ T2366] pvrusb2: request_firmware fatal error with code=-110 [ 851.501754][ T2366] pvrusb2: Failure uploading firmware1 [ 851.501765][ T2366] pvrusb2: Device initialization was not successful. [ 851.501772][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 851.501780][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 851.702253][T15463] pvrusb2: Device being rendered inoperable [ 852.812521][ T1237] usb 4-1: string descriptor 0 read error: -71 [ 852.833306][ T1237] usb 4-1: USB disconnect, device number 32 [ 853.232318][T15041] Bluetooth: hci3: command tx timeout [ 854.094651][ T5915] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 854.219428][ T5915] usb 4-1: device descriptor read/64, error -71 [ 854.459476][ T5915] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 854.589412][ T5915] usb 4-1: device descriptor read/64, error -71 [ 854.699771][ T5915] usb usb4-port1: attempt power cycle [ 855.019193][T16554] lo speed is unknown, defaulting to 1000 [ 855.025205][T16588] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3414'. [ 855.030878][T16582] syzkaller0: entered promiscuous mode [ 855.030906][T16582] syzkaller0: entered allmulticast mode [ 855.043111][ T5915] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 855.061168][ T5915] usb 4-1: device descriptor read/8, error -71 [ 855.313643][T15041] Bluetooth: hci3: command tx timeout [ 855.319438][ T5915] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 855.346561][ T5915] usb 4-1: device descriptor read/8, error -71 [ 855.386883][T16606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3421'. [ 855.386999][T16606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 855.434258][ T37] kauditd_printk_skb: 43 callbacks suppressed [ 855.434277][ T37] audit: type=1800 audit(1757868074.977:1560): pid=16604 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.3419" name="/" dev="9p" ino=2 res=0 errno=0 [ 855.449786][ T5915] usb usb4-port1: unable to enumerate USB device [ 855.474357][T16554] vxcan1 speed is unknown, defaulting to 1000 [ 856.818269][T16617] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 857.040301][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.097517][T16620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3424'. [ 857.097548][T16620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3424'. [ 857.389383][T15041] Bluetooth: hci3: command tx timeout [ 857.439576][T12524] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 857.589404][T12524] usb 2-1: Using ep0 maxpacket: 16 [ 857.592300][T12524] usb 2-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 857.592345][T12524] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 40, using maximum allowed: 30 [ 857.592387][T12524] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 40 [ 857.592429][T12524] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 857.592451][T12524] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.598256][T12524] usb 2-1: config 0 descriptor?? [ 857.843575][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.342815][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3429'. [ 859.865092][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.974628][T16645] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3430'. [ 860.016651][T16645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 860.070478][T16554] chnl_net:caif_netlink_parms(): no params data found [ 860.292022][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.331931][T12524] usb 2-1: string descriptor 0 read error: -71 [ 860.370554][T12524] usb 2-1: USB disconnect, device number 35 [ 860.732274][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3432'. [ 860.732398][T16652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 861.976029][ T1237] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 862.765651][T15041] Bluetooth: hci1: command 0x0406 tx timeout [ 862.819551][ T1237] usb 1-1: device descriptor read/64, error -71 [ 862.955443][T16554] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.955677][T16554] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.955904][T16554] bridge_slave_0: entered allmulticast mode [ 862.993625][T16554] bridge_slave_0: entered promiscuous mode [ 863.077136][ T1237] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 863.211685][ T1237] usb 1-1: device descriptor read/64, error -71 [ 863.215390][T16554] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.215543][T16554] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.215777][T16554] bridge_slave_1: entered allmulticast mode [ 863.218529][T16554] bridge_slave_1: entered promiscuous mode [ 863.303279][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3440'. [ 863.348282][ T1237] usb usb1-port1: attempt power cycle [ 863.971751][T16554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.048269][T16554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.319393][T16576] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 864.479441][T16576] usb 4-1: Using ep0 maxpacket: 16 [ 864.482142][T16576] usb 4-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 864.482169][T16576] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 40, using maximum allowed: 30 [ 864.482197][T16576] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 40 [ 864.482220][T16576] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 864.482232][T16576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.576578][T16576] usb 4-1: config 0 descriptor?? [ 864.830778][T16554] team0: Port device team_slave_0 added [ 864.852491][T16554] team0: Port device team_slave_1 added [ 867.253502][T16576] usb 4-1: string descriptor 0 read error: -71 [ 867.337358][T16576] usb 4-1: USB disconnect, device number 37 [ 867.759870][ T67] dvmrp8 (unregistering): left allmulticast mode [ 870.276700][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.276769][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.404146][ T67] bond0 (unregistering): Released all slaves [ 870.415644][ T67] bond1 (unregistering): Released all slaves [ 870.469754][T16697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3443'. [ 870.469802][T16697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3443'. [ 870.616343][T16712] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3448'. [ 870.622832][T16712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 870.655535][T16554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.655551][T16554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.655577][T16554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.656157][ T5760] lo speed is unknown, defaulting to 1000 [ 870.658094][T16554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.658107][T16554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.658130][T16554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.741222][ T67] tipc: Left network mode [ 871.005018][T16719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3451'. [ 872.009358][ T5915] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 872.029627][ T5760] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 872.209617][ T5760] usb 2-1: Using ep0 maxpacket: 16 [ 872.212083][ T5760] usb 2-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 872.212124][ T5760] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 40, using maximum allowed: 30 [ 872.212168][ T5760] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 40 [ 872.212219][ T5760] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 872.212242][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.289718][ T5760] usb 2-1: config 0 descriptor?? [ 872.354905][ T5915] usb 4-1: device descriptor read/64, error -71 [ 872.422243][T15463] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 874.773236][T15463] usb 3-1: unable to get BOS descriptor or descriptor too short [ 874.774435][T15463] usb 3-1: not running at top speed; connect to a high speed hub [ 874.786990][T15463] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 874.787017][T15463] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 874.808471][T15463] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 874.808556][T15463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.808575][T15463] usb 3-1: Product: syz [ 874.808588][T15463] usb 3-1: Manufacturer: syz [ 874.808601][T15463] usb 3-1: SerialNumber: syz [ 874.857315][T16554] hsr_slave_0: entered promiscuous mode [ 874.874616][T16554] hsr_slave_1: entered promiscuous mode [ 874.893879][T16554] debugfs: 'hsr0' already exists in 'hsr' [ 874.893907][T16554] Cannot create hsr debugfs directory [ 875.985180][ T5760] usb 2-1: string descriptor 0 read error: -71 [ 876.034316][ T5760] usb 2-1: USB disconnect, device number 36 [ 876.039658][T15463] usb 3-1: 0:2 : does not exist [ 876.066627][T15463] usb 3-1: USB disconnect, device number 29 [ 876.630962][T16764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3461'. [ 876.630993][T16764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3461'. [ 876.631968][T16751] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3459'. [ 876.631988][T16751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 876.739426][ T5915] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 877.723726][ T5915] usb 4-1: config 0 has an invalid interface number: 59 but max is 0 [ 877.723754][ T5915] usb 4-1: config 0 has no interface number 0 [ 877.728007][ T5915] usb 4-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=6d.dd [ 877.728035][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.728054][ T5915] usb 4-1: Product: syz [ 877.728067][ T5915] usb 4-1: Manufacturer: syz [ 877.728081][ T5915] usb 4-1: SerialNumber: syz [ 877.779879][ T5915] usb 4-1: config 0 descriptor?? [ 877.802679][ T5915] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 878.252444][T16770] netlink: 'syz.3.3463': attribute type 1 has an invalid length. [ 879.125103][ T2366] usb 4-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 879.125128][ T2366] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 879.132335][ T5915] usb 4-1: USB disconnect, device number 40 [ 880.499563][ T67] hsr_slave_0: left promiscuous mode [ 880.579496][T15463] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 880.581705][ T67] hsr_slave_1: left promiscuous mode [ 880.609383][ T6687] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 880.742616][T15463] usb 3-1: unable to get BOS descriptor or descriptor too short [ 880.743395][T15463] usb 3-1: not running at top speed; connect to a high speed hub [ 880.745925][T15463] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 880.745948][T15463] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 880.759480][ T6687] usb 1-1: Using ep0 maxpacket: 16 [ 880.794894][ T6687] usb 1-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 880.794937][ T6687] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 40, using maximum allowed: 30 [ 880.794979][ T6687] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 40 [ 880.795023][ T6687] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 880.795046][ T6687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.797632][T15463] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 880.797659][T15463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.797679][T15463] usb 3-1: Product: syz [ 880.797693][T15463] usb 3-1: Manufacturer: syz [ 880.797707][T15463] usb 3-1: SerialNumber: syz [ 880.895529][ T6687] usb 1-1: config 0 descriptor?? [ 881.394632][T15463] usb 3-1: 0:2 : does not exist [ 881.394954][T15463] usb 3-1: unit 0 not found! [ 882.367732][ T67] batadv0: left allmulticast mode [ 882.368181][ T67] batadv0: left promiscuous mode [ 882.370331][ T67] veth1_macvtap: left promiscuous mode [ 882.372436][ T67] veth0_macvtap: left promiscuous mode [ 882.374874][ T67] veth1_vlan: left promiscuous mode [ 882.377083][ T67] veth0_vlan: left promiscuous mode [ 882.379840][T15463] usb 3-1: USB disconnect, device number 30 [ 883.555050][ T6687] usb 1-1: string descriptor 0 read error: -71 [ 883.564748][ T6687] usb 1-1: USB disconnect, device number 32 [ 889.080350][T16795] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3473'. [ 889.084931][T16795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 889.977067][ T37] audit: type=1800 audit(1757868109.517:1561): pid=16823 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3481" name="/" dev="9p" ino=2 res=0 errno=0 [ 890.306037][T16829] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3484'. [ 890.319801][T16829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 890.789397][T16576] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 891.069811][T16576] usb 1-1: Using ep0 maxpacket: 16 [ 891.077641][T16576] usb 1-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 891.077670][T16576] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 40, using maximum allowed: 30 [ 891.077735][T16576] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 40 [ 891.077758][T16576] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 891.077770][T16576] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.087171][T16576] usb 1-1: config 0 descriptor?? [ 893.563789][T16850] alle: renamed from bridge_slave_0 (while UP) [ 893.687616][T16850] bridge0: port 1(alle) entered disabled state [ 894.389618][T16576] usb 1-1: string descriptor 0 read error: -71 [ 894.393088][T16576] usb 1-1: USB disconnect, device number 33 [ 894.616426][T16554] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 894.838761][T16860] netlink: 'syz.3.3492': attribute type 1 has an invalid length. [ 894.838809][T16860] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3492'. [ 895.282451][T16554] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 895.469345][T16554] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 895.598116][T16867] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3495'. [ 895.605039][T16867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 895.612453][T16554] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 896.074420][T16885] alle: left allmulticast mode [ 896.074454][T16885] alle: left promiscuous mode [ 896.074736][T16885] bridge0: port 1(alle) entered disabled state [ 896.237262][T16885] bridge_slave_1: left allmulticast mode [ 896.237292][T16885] bridge_slave_1: left promiscuous mode [ 896.237542][T16885] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.591078][T16885] bond0: (slave bond_slave_0): Releasing backup interface [ 896.840319][T16885] bond0: (slave bond_slave_1): Releasing backup interface [ 897.105505][T16885] team0: Port device team_slave_0 removed [ 897.303317][T16885] team0: Port device team_slave_1 removed [ 897.304586][T16885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 897.304616][T16885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 897.360872][T16885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 897.360895][T16885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.428981][ T6687] vxcan1 speed is unknown, defaulting to 1000 [ 897.755829][T16554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.246023][T16554] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.278884][ T1808] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.283406][ T1808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.390477][T16911] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3507'. [ 898.452616][T16911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 898.461719][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.461870][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.716734][ T5844] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 898.979995][T16576] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 899.164298][T16576] usb 1-1: config 0 has an invalid interface number: 59 but max is 0 [ 899.164326][T16576] usb 1-1: config 0 has no interface number 0 [ 899.167727][T16576] usb 1-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=6d.dd [ 899.167754][T16576] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.167782][T16576] usb 1-1: Product: syz [ 899.167799][T16576] usb 1-1: Manufacturer: syz [ 899.167812][T16576] usb 1-1: SerialNumber: syz [ 899.223086][T16576] usb 1-1: config 0 descriptor?? [ 899.245637][T16576] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 899.645548][T16936] netlink: 'syz.0.3510': attribute type 1 has an invalid length. [ 900.060572][T16554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.429089][T16576] usb 1-1: USB disconnect, device number 34 [ 900.440938][T16576] pvrusb2: Device being rendered inoperable [ 900.478399][T16944] random: crng reseeded on system resumption [ 900.568793][T16947] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3518'. [ 900.583387][T16947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 900.752073][T16956] netlink: 'syz.2.3520': attribute type 1 has an invalid length. [ 900.752088][T16956] netlink: 'syz.2.3520': attribute type 4 has an invalid length. [ 900.752095][T16956] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3520'. [ 901.706791][T16962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3523'. [ 903.044152][T16975] batadv_slave_1: entered promiscuous mode [ 903.073930][T16554] veth0_vlan: entered promiscuous mode [ 903.093720][T16554] veth1_vlan: entered promiscuous mode [ 903.139094][T16977] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3528'. [ 903.183475][T16554] veth0_macvtap: entered promiscuous mode [ 903.205370][T16554] veth1_macvtap: entered promiscuous mode [ 903.238624][T16554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.265215][T16554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.293955][ T3577] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.295147][ T3577] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.298919][ T3577] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.299132][ T3577] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.299441][ T6687] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 903.342182][T16981] syzkaller0: entered promiscuous mode [ 903.342221][T16981] syzkaller0: entered allmulticast mode [ 903.493006][ T6687] usb 2-1: Using ep0 maxpacket: 32 [ 903.494262][T16985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3531'. [ 903.494367][T16985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 903.523635][T16984] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3530'. [ 903.639476][ T6687] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 903.639505][ T6687] usb 2-1: config 0 has no interface number 0 [ 903.639557][ T6687] usb 2-1: config 0 interface 230 has no altsetting 0 [ 903.642948][ T6687] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 903.642976][ T6687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.642995][ T6687] usb 2-1: Product: syz [ 903.643009][ T6687] usb 2-1: Manufacturer: syz [ 903.643023][ T6687] usb 2-1: SerialNumber: syz [ 903.819530][ T6687] usb 2-1: config 0 descriptor?? [ 903.897282][ T6687] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 903.972944][ T6687] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 904.109379][T16974] batadv_slave_1: left promiscuous mode [ 904.132744][ T6687] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 904.139782][ T6687] usb 2-1: USB disconnect, device number 37 [ 904.449589][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.449605][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.578628][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.578650][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.663353][T17024] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3539'. [ 909.551959][T17036] batadv_slave_1: entered promiscuous mode [ 909.605524][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3545'. [ 909.700177][T17037] syz_tun: entered promiscuous mode [ 909.729363][T17037] syz_tun: left promiscuous mode [ 910.013966][T15041] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 910.032993][T15041] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 910.035577][T15041] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 910.037261][T15041] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 910.038025][T15041] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 910.499487][T15463] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 911.249359][T15463] usb 3-1: Using ep0 maxpacket: 16 [ 911.251651][T15463] usb 3-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 911.251691][T15463] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 40, using maximum allowed: 30 [ 911.251734][T15463] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 40 [ 911.251775][T15463] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 911.251797][T15463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.261185][T15463] usb 3-1: config 0 descriptor?? [ 911.368173][T17052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3550'. [ 912.667867][ T5844] Bluetooth: hci2: command tx timeout [ 914.156503][T17064] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3551'. [ 914.270489][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 914.669443][T15041] Bluetooth: hci2: command tx timeout [ 915.292366][T15463] usb 3-1: string descriptor 0 read error: -71 [ 915.298105][T15463] usb 3-1: USB disconnect, device number 31 [ 915.595448][T17071] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 916.549336][T17034] batadv_slave_1: left promiscuous mode [ 916.586283][T17040] lo speed is unknown, defaulting to 1000 [ 916.589060][T17040] vxcan1 speed is unknown, defaulting to 1000 [ 916.769874][T15041] Bluetooth: hci2: command tx timeout [ 916.794303][ T3592] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.019140][T17081] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3556'. [ 917.046864][T17086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3558'. [ 917.057697][T17081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 917.071277][T17086] syz_tun: entered promiscuous mode [ 917.111720][T15463] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 917.227675][ T3592] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.284375][T15463] usb 5-1: config 0 has an invalid interface number: 59 but max is 0 [ 917.284402][T15463] usb 5-1: config 0 has no interface number 0 [ 917.288016][T15463] usb 5-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=6d.dd [ 917.288046][T15463] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.288064][T15463] usb 5-1: Product: syz [ 917.288078][T15463] usb 5-1: Manufacturer: syz [ 917.288093][T15463] usb 5-1: SerialNumber: syz [ 917.330484][T15463] usb 5-1: config 0 descriptor?? [ 918.418526][T17096] netlink: 'syz.4.3557': attribute type 1 has an invalid length. [ 918.719483][T15463] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 918.829396][T15041] Bluetooth: hci2: command tx timeout [ 919.016543][T15463] usb 5-1: USB disconnect, device number 21 [ 919.017813][T15463] pvrusb2: Device being rendered inoperable [ 919.018436][ T3592] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.226430][ T3592] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.668225][T17116] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 922.873794][T17119] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3568'. [ 922.877279][T17119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 922.890619][T17124] batadv_slave_1: entered promiscuous mode [ 923.083744][T17040] chnl_net:caif_netlink_parms(): no params data found [ 923.159492][T12526] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 923.319534][T12526] usb 5-1: Using ep0 maxpacket: 32 [ 923.321884][T12526] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 923.321911][T12526] usb 5-1: config 0 has no interface number 0 [ 923.321960][T12526] usb 5-1: config 0 interface 230 has no altsetting 0 [ 924.417564][T12526] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 924.417598][T12526] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.417618][T12526] usb 5-1: Product: syz [ 924.417633][T12526] usb 5-1: Manufacturer: syz [ 924.417646][T12526] usb 5-1: SerialNumber: syz [ 924.457580][T12526] usb 5-1: config 0 descriptor?? [ 924.472139][T12526] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 924.497372][T12526] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 925.189894][T12526] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 925.227841][T12526] usb 5-1: USB disconnect, device number 22 [ 928.220117][ T3592] dvmrp8 (unregistering): left allmulticast mode [ 930.120003][ T3592] bond0 (unregistering): left allmulticast mode [ 930.120026][ T3592] bond0 (unregistering): left promiscuous mode [ 930.301896][ T3592] bond0 (unregistering): Released all slaves [ 930.339924][T17157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3574'. [ 930.339952][T17157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3574'. [ 930.492713][T17122] batadv_slave_1: left promiscuous mode [ 930.756023][ T3592] tipc: Left network mode [ 931.726234][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.726281][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.133861][T17040] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.137568][T17040] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.137808][T17040] bridge_slave_0: entered allmulticast mode [ 936.171050][T17040] bridge_slave_0: entered promiscuous mode [ 936.199751][T17040] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.199891][T17040] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.200109][T17040] bridge_slave_1: entered allmulticast mode [ 936.202646][T17040] bridge_slave_1: entered promiscuous mode [ 937.810412][T17180] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3579'. [ 937.813127][T17180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 938.017565][T17192] netlink: 'syz.3.3583': attribute type 1 has an invalid length. [ 939.439457][T12526] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 939.482222][T17040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.491032][T17199] batadv_slave_1: entered promiscuous mode [ 939.494632][T17040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.589430][T12526] usb 5-1: Using ep0 maxpacket: 32 [ 939.592923][T12526] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 939.592951][T12526] usb 5-1: config 0 has no interface number 0 [ 939.593003][T12526] usb 5-1: config 0 interface 230 has no altsetting 0 [ 939.598024][T12526] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 939.598054][T12526] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.598073][T12526] usb 5-1: Product: syz [ 939.598084][T12526] usb 5-1: Manufacturer: syz [ 939.598097][T12526] usb 5-1: SerialNumber: syz [ 939.668830][T12526] usb 5-1: config 0 descriptor?? [ 939.681081][T12526] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 939.687311][T12526] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 940.921671][T12526] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 940.934324][T12526] usb 5-1: USB disconnect, device number 23 [ 941.393049][T17197] batadv_slave_1: left promiscuous mode [ 941.400841][T17212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3585'. [ 941.400867][T17212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3585'. [ 941.515902][T17040] team0: Port device team_slave_0 added [ 941.558152][T17040] team0: Port device team_slave_1 added [ 942.394091][ T2366] pvrusb2: request_firmware fatal error with code=-110 [ 942.394113][ T2366] pvrusb2: Failure uploading firmware1 [ 942.394120][ T2366] pvrusb2: Device initialization was not successful. [ 942.394127][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 942.394136][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 942.394426][ T5915] pvrusb2: Device being rendered inoperable [ 943.158481][T17240] netlink: 'syz.2.3595': attribute type 1 has an invalid length. [ 943.205017][T17234] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3593'. [ 943.214261][T17234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 943.555103][ T3592] hsr_slave_0: left promiscuous mode [ 943.609444][ T3592] hsr_slave_1: left promiscuous mode [ 944.009784][ T3592] veth1_macvtap: left promiscuous mode [ 944.009910][ T3592] veth0_macvtap: left promiscuous mode [ 944.010197][ T3592] veth1_vlan: left promiscuous mode [ 944.013933][ T3592] veth0_vlan: left promiscuous mode [ 949.151125][ T3592] dummy0 (unregistering): left promiscuous mode [ 949.193954][ T3592] team0 (unregistering): Port device dummy0 removed [ 950.152016][T17040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.152033][T17040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.152050][T17040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.193601][T17040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.193617][T17040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.193641][T17040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.004683][T17260] batadv_slave_1: entered promiscuous mode [ 952.032716][T17040] hsr_slave_0: entered promiscuous mode [ 952.033925][T17040] hsr_slave_1: entered promiscuous mode [ 952.034706][T17040] debugfs: 'hsr0' already exists in 'hsr' [ 952.034727][T17040] Cannot create hsr debugfs directory [ 952.169378][ T5915] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 952.330710][T17275] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3607'. [ 952.335801][T17275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 952.359373][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 952.361702][ T5915] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 952.361729][ T5915] usb 2-1: config 0 has no interface number 0 [ 952.361777][ T5915] usb 2-1: config 0 interface 230 has no altsetting 0 [ 952.364792][ T5915] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 952.364818][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.364838][ T5915] usb 2-1: Product: syz [ 952.364852][ T5915] usb 2-1: Manufacturer: syz [ 952.364865][ T5915] usb 2-1: SerialNumber: syz [ 952.445710][ T5915] usb 2-1: config 0 descriptor?? [ 952.455891][ T5915] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 952.505007][ T5915] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 952.961068][T17257] batadv_slave_1: left promiscuous mode [ 953.004277][ T5915] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 953.018296][T17284] netlink: 'syz.2.3608': attribute type 1 has an invalid length. [ 953.018318][T17284] netlink: 'syz.2.3608': attribute type 4 has an invalid length. [ 953.018329][T17284] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3608'. [ 953.169307][ T5915] usb 2-1: USB disconnect, device number 38 [ 956.598754][T17316] binder_alloc: 17311: binder_alloc_buf, no vma [ 957.061893][T17318] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3619'. [ 958.234629][T17327] batadv_slave_1: entered promiscuous mode [ 958.659556][T16576] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 958.823355][T16576] usb 3-1: Using ep0 maxpacket: 32 [ 958.833335][T16576] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 958.833362][T16576] usb 3-1: config 0 has no interface number 0 [ 958.833411][T16576] usb 3-1: config 0 interface 230 has no altsetting 0 [ 958.866863][T16576] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 958.866891][T16576] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.866907][T16576] usb 3-1: Product: syz [ 958.866918][T16576] usb 3-1: Manufacturer: syz [ 958.866930][T16576] usb 3-1: SerialNumber: syz [ 958.940177][T16576] usb 3-1: config 0 descriptor?? [ 958.943904][T16576] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 958.974618][T16576] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 959.158466][T17326] batadv_slave_1: left promiscuous mode [ 959.300491][T16576] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 959.330673][T16576] usb 3-1: USB disconnect, device number 32 [ 960.035578][T17040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 960.939597][T17040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 961.042028][T17040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 961.138654][T17040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 961.432665][T17361] random: crng reseeded on system resumption [ 961.522572][T17369] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3630'. [ 961.641993][ T3592] IPVS: stop unused estimator thread 0... [ 962.001554][T16544] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 962.102588][T17040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.144788][T17040] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.166151][T16544] usb 5-1: unable to get BOS descriptor or descriptor too short [ 962.166924][T17385] batadv_slave_1: entered promiscuous mode [ 962.168745][T16544] usb 5-1: not running at top speed; connect to a high speed hub [ 962.180139][T16544] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 962.180178][T16544] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 962.185415][T16544] usb 5-1: string descriptor 0 read error: -22 [ 962.185508][T16544] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 962.185523][T16544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.241651][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.241790][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.266694][T16544] usb 5-1: 0:2 : does not exist [ 962.288645][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.288800][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.609459][T16576] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 962.833878][T16576] usb 4-1: Using ep0 maxpacket: 32 [ 962.894505][T16576] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 962.894532][T16576] usb 4-1: config 0 has no interface number 0 [ 962.894580][T16576] usb 4-1: config 0 interface 230 has no altsetting 0 [ 962.898727][T16576] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 962.898757][T16576] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.898776][T16576] usb 4-1: Product: syz [ 962.898790][T16576] usb 4-1: Manufacturer: syz [ 962.898804][T16576] usb 4-1: SerialNumber: syz [ 962.908369][T16576] usb 4-1: config 0 descriptor?? [ 962.972169][T16544] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 962.977772][T16544] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 963.002448][T16544] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 963.016453][T16576] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 963.043693][T16576] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 963.136275][T16544] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 963.139802][T17384] batadv_slave_1: left promiscuous mode [ 963.203943][T16544] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 963.205372][T16576] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 963.225659][T16576] usb 4-1: USB disconnect, device number 41 [ 963.808388][T16544] usb 5-1: USB disconnect, device number 24 [ 964.123908][T17040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.218162][T17408] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3641'. [ 964.306887][T17040] veth0_vlan: entered promiscuous mode [ 964.336284][T17040] veth1_vlan: entered promiscuous mode [ 964.402331][T15463] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 964.560186][ T5760] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 964.912222][T17040] veth0_macvtap: entered promiscuous mode [ 964.944779][T15463] usb 5-1: config 0 has an invalid interface number: 59 but max is 0 [ 964.944808][T15463] usb 5-1: config 0 has no interface number 0 [ 964.947459][T15463] usb 5-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=6d.dd [ 964.947477][T15463] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.947488][T15463] usb 5-1: Product: syz [ 964.947495][T15463] usb 5-1: Manufacturer: syz [ 964.947503][T15463] usb 5-1: SerialNumber: syz [ 965.000042][T15463] usb 5-1: config 0 descriptor?? [ 965.018984][ T5760] usb 3-1: unable to get BOS descriptor or descriptor too short [ 965.023961][ T5760] usb 3-1: not running at top speed; connect to a high speed hub [ 965.035552][ T5760] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 965.035578][ T5760] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 965.041245][T17040] veth1_macvtap: entered promiscuous mode [ 965.048708][T15463] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 965.056892][ T5760] usb 3-1: string descriptor 0 read error: -22 [ 965.098133][ T5760] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 965.098223][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.175939][ T5760] usb 3-1: 0:2 : does not exist [ 965.663736][T17040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.693286][T17040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.787547][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.787824][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.787846][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.787865][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.404384][ T5760] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 966.416324][ T5760] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 966.431515][ T5760] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 966.485682][ T2366] usb 5-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 966.485701][ T2366] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 966.511291][T15463] usb 5-1: USB disconnect, device number 25 [ 966.591998][ T5760] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 966.608420][ T5760] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 966.626361][ T5760] usb 3-1: USB disconnect, device number 33 [ 966.929446][ T3577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.929468][ T3577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.094835][T16083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.094849][T16083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.275549][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3652'. [ 967.521718][T17441] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3653'. [ 969.112453][T17454] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 969.147572][ T5760] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 969.406716][ T5760] usb 1-1: unable to get BOS descriptor or descriptor too short [ 970.095235][ T5760] usb 1-1: not running at top speed; connect to a high speed hub [ 970.101909][ T5760] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 970.101936][ T5760] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 970.107420][ T5760] usb 1-1: string descriptor 0 read error: -22 [ 970.107629][ T5760] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 970.107653][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.217454][ T5760] usb 1-1: 0:2 : does not exist [ 970.868829][ T5760] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 970.903678][ T5760] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 970.930862][ T5760] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 971.180524][ T5760] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 971.186149][ T5760] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 971.190935][ T5760] usb 1-1: USB disconnect, device number 35 [ 971.712015][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3663'. [ 971.721600][T17476] syz_tun: entered promiscuous mode [ 971.724777][T17476] syz_tun: left promiscuous mode [ 973.251838][T17490] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3668'. [ 973.332669][T17494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3669'. [ 974.570719][T17502] fuse: Unknown parameter 'use00000000000000000000' [ 975.229831][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 976.063206][T17516] lo speed is unknown, defaulting to 1000 [ 976.065947][T17516] vxcan1 speed is unknown, defaulting to 1000 [ 976.587218][T17525] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3682'. [ 978.853342][T17552] tipc: Started in network mode [ 978.853372][T17552] tipc: Node identity 7e82d13f1c3e, cluster identity 4711 [ 978.853592][T17552] tipc: Enabled bearer , priority 0 [ 978.853638][T17559] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3688'. [ 978.858674][T17549] tipc: Resetting bearer [ 979.179578][T17548] tipc: Disabling bearer [ 985.385339][T17594] tipc: Enabled bearer , priority 0 [ 985.386294][T17594] syzkaller0: entered promiscuous mode [ 985.386321][T17594] syzkaller0: entered allmulticast mode [ 985.403185][T17594] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3703'. [ 985.416733][T17594] tipc: Resetting bearer [ 985.476789][T17591] tipc: Resetting bearer [ 986.395391][ T6687] tipc: Node number set to 1656541503 [ 986.631447][T17591] tipc: Disabling bearer [ 988.453973][T15041] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 988.749509][ T5760] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 988.915279][T17638] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 989.993048][ T5760] usb 3-1: config 0 has an invalid interface number: 59 but max is 0 [ 989.993075][ T5760] usb 3-1: config 0 has no interface number 0 [ 989.995219][ T5760] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=6d.dd [ 989.995235][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.995246][ T5760] usb 3-1: Product: syz [ 989.995253][ T5760] usb 3-1: Manufacturer: syz [ 989.995260][ T5760] usb 3-1: SerialNumber: syz [ 989.998350][ T5760] usb 3-1: config 0 descriptor?? [ 990.052675][ T5760] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 990.726870][ T5760] usb 3-1: USB disconnect, device number 34 [ 990.727607][ T5760] pvrusb2: Device being rendered inoperable [ 991.189761][T17648] tipc: Enabled bearer , priority 0 [ 991.190459][T17648] syzkaller0: entered promiscuous mode [ 991.190483][T17648] syzkaller0: entered allmulticast mode [ 991.192924][T17648] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3722'. [ 991.231020][T17648] tipc: Resetting bearer [ 991.310422][T17646] tipc: Resetting bearer [ 992.998106][T17646] tipc: Disabling bearer [ 993.046319][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 993.051244][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 993.053642][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 993.055264][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 993.056026][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 993.180966][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.181043][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.043358][T17683] lo speed is unknown, defaulting to 1000 [ 994.044827][T17683] vxcan1 speed is unknown, defaulting to 1000 [ 995.150249][ T5844] Bluetooth: hci4: command tx timeout [ 995.352343][T17698] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 996.524346][T17667] lo speed is unknown, defaulting to 1000 [ 996.557044][T17667] vxcan1 speed is unknown, defaulting to 1000 [ 996.806930][T17704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3734'. [ 997.392267][ T5844] Bluetooth: hci4: command tx timeout [ 997.414945][T17704] bond0: entered promiscuous mode [ 997.414966][T17704] bond_slave_0: entered promiscuous mode [ 997.415203][T17704] bond_slave_1: entered promiscuous mode [ 997.417415][T17704] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 997.922022][T17716] tipc: Started in network mode [ 997.922054][T17716] tipc: Node identity a66784013777, cluster identity 4711 [ 997.922274][T17716] tipc: Enabled bearer , priority 0 [ 997.923264][T17716] syzkaller0: entered promiscuous mode [ 997.923289][T17716] syzkaller0: entered allmulticast mode [ 997.928578][T17716] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3738'. [ 997.971290][T17716] tipc: Resetting bearer [ 998.049463][T17715] tipc: Resetting bearer [ 998.684002][T17715] tipc: Disabling bearer [ 999.480963][T16994] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1000.237637][T15041] Bluetooth: hci4: command tx timeout [ 1000.432912][T16994] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1000.433675][T16994] usb 1-1: not running at top speed; connect to a high speed hub [ 1000.435220][T16994] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.435242][T16994] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1000.476924][T16994] usb 1-1: string descriptor 0 read error: -22 [ 1000.477033][T16994] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1000.477046][T16994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.515035][T16994] usb 1-1: 0:2 : does not exist [ 1001.339452][T16994] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1001.357946][T16994] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1001.390998][T16994] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 1001.480504][T16994] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1001.520803][T16994] usb 1-1: USB disconnect, device number 36 [ 1002.349273][T15041] Bluetooth: hci4: command tx timeout [ 1002.393936][T17760] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3750'. [ 1002.472310][T16525] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.636312][T17752] bridge_slave_0: left allmulticast mode [ 1002.636345][T17752] bridge_slave_0: left promiscuous mode [ 1002.636535][T17752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.735559][T17752] bridge_slave_1: left allmulticast mode [ 1002.735594][T17752] bridge_slave_1: left promiscuous mode [ 1002.752396][T17752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.864102][T17752] bond0: (slave bond_slave_0): Releasing backup interface [ 1002.943626][T17752] bond0: (slave bond_slave_1): Releasing backup interface [ 1003.075653][T17752] team0: Port device team_slave_0 removed [ 1003.134028][T17752] team0: Port device team_slave_1 removed [ 1003.134739][T17752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1003.134759][T17752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.184907][T17752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1003.184930][T17752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.575869][T17773] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 1007.225342][T16525] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.351413][T17774] tipc: Enabled bearer , priority 0 [ 1007.378921][T17784] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3752'. [ 1007.381308][T17787] tipc: Resetting bearer [ 1007.385370][T17775] syzkaller0: entered promiscuous mode [ 1007.385401][T17775] syzkaller0: entered allmulticast mode [ 1007.477651][T17807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3758'. [ 1007.477771][T17807] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1007.477788][T17807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1007.606092][T17768] tipc: Resetting bearer [ 1008.016997][T17768] tipc: Disabling bearer [ 1008.208356][T17815] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3760'. [ 1008.898543][T17823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3763'. [ 1009.200002][T16525] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.552184][T17823] syz_tun: entered promiscuous mode [ 1009.555064][T17823] syz_tun: left promiscuous mode [ 1009.689024][T17829] lo speed is unknown, defaulting to 1000 [ 1009.783473][T17829] vxcan1 speed is unknown, defaulting to 1000 [ 1010.482022][T16525] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.661720][T17667] chnl_net:caif_netlink_parms(): no params data found [ 1011.598032][T17849] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3770'. [ 1012.056190][T17667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.056415][T17667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.056630][T17667] bridge_slave_0: entered allmulticast mode [ 1012.086931][T17667] bridge_slave_0: entered promiscuous mode [ 1012.138832][T17667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.138997][T17667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.161153][T17667] bridge_slave_1: entered allmulticast mode [ 1012.189717][T17667] bridge_slave_1: entered promiscuous mode [ 1012.299461][T17852] tipc: Started in network mode [ 1012.299491][T17852] tipc: Node identity 5e614a3f7eb1, cluster identity 4711 [ 1012.299702][T17852] tipc: Enabled bearer , priority 0 [ 1012.567202][T17857] syzkaller0: entered promiscuous mode [ 1012.567231][T17857] syzkaller0: entered allmulticast mode [ 1012.596200][T17852] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3771'. [ 1012.605954][T17860] tipc: Resetting bearer [ 1012.802335][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3776'. [ 1012.833137][T17850] tipc: Resetting bearer [ 1012.967525][T17850] tipc: Disabling bearer [ 1013.100718][T17667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.217862][T17667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.218376][T16525] bridge_slave_1: left allmulticast mode [ 1013.218405][T16525] bridge_slave_1: left promiscuous mode [ 1013.229227][T16525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.448437][T16525] alle: left allmulticast mode [ 1013.448518][T16525] alle: left promiscuous mode [ 1013.483861][T16525] bridge0: port 1(alle) entered disabled state [ 1015.762618][T17897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1015.772101][T17897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1017.640571][T16525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.719796][T16525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.745479][T16525] bond0 (unregistering): Released all slaves [ 1018.020099][T17903] tipc: Enabled bearer , priority 0 [ 1018.021380][T17904] syzkaller0: entered promiscuous mode [ 1018.021407][T17904] syzkaller0: entered allmulticast mode [ 1018.027981][T17911] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3789'. [ 1018.060135][T17906] tipc: Resetting bearer [ 1018.246508][T17917] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 1020.059683][T17901] tipc: Resetting bearer [ 1020.231852][T17901] tipc: Disabling bearer [ 1020.237172][T17931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3795'. [ 1021.015281][T17942] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 1021.481367][T17667] team0: Port device team_slave_0 added [ 1021.919469][T17937] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3797'. [ 1021.923847][T17937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1021.935984][T17667] team0: Port device team_slave_1 added [ 1022.229777][T17949] fuse: Unknown parameter 'user_id00000000000000000000' [ 1022.521022][T17956] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3805'. [ 1023.511564][ T6687] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1023.704095][ T6687] usb 1-1: device descriptor read/64, error -71 [ 1023.816475][T17667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.816493][T17667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.816517][T17667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.826206][T17667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.826224][T17667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.826247][T17667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.949303][ T6687] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1024.080893][ T6687] usb 1-1: device descriptor read/64, error -71 [ 1024.189788][ T6687] usb usb1-port1: attempt power cycle [ 1024.498251][T17667] hsr_slave_0: entered promiscuous mode [ 1024.515320][T17667] hsr_slave_1: entered promiscuous mode [ 1024.517611][T17667] debugfs: 'hsr0' already exists in 'hsr' [ 1024.517639][T17667] Cannot create hsr debugfs directory [ 1024.529448][ T6687] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1024.580000][ T6687] usb 1-1: device descriptor read/8, error -71 [ 1024.830319][ T6687] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1024.853555][ T6687] usb 1-1: device descriptor read/8, error -71 [ 1024.959749][ T6687] usb usb1-port1: unable to enumerate USB device [ 1025.312684][T17981] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3810'. [ 1025.317423][T17981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1025.489465][T16525] hsr_slave_0: left promiscuous mode [ 1025.535204][T16525] hsr_slave_1: left promiscuous mode [ 1025.536151][T16525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1025.536376][T16525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.594059][T16525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1025.594085][T16525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.875793][T16525] veth1_macvtap: left promiscuous mode [ 1025.875913][T16525] veth0_macvtap: left promiscuous mode [ 1025.883025][T16525] veth1_vlan: left promiscuous mode [ 1025.883245][T16525] veth0_vlan: left promiscuous mode [ 1026.181125][T17998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3816'. [ 1028.705797][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3819'. [ 1028.994374][ T2366] pvrusb2: request_firmware fatal error with code=-110 [ 1028.994392][ T2366] pvrusb2: Failure uploading firmware1 [ 1028.994399][ T2366] pvrusb2: Device initialization was not successful. [ 1028.994405][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1028.994413][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1028.994583][T15463] pvrusb2: Device being rendered inoperable [ 1030.161503][T16525] team0 (unregistering): Port device team_slave_1 removed [ 1030.420184][T16525] team0 (unregistering): Port device team_slave_0 removed [ 1033.187930][ T5929] lo speed is unknown, defaulting to 1000 [ 1033.187956][ T5929] infiniband syz0: ib_query_port failed (-19) [ 1033.247223][T18009] syz_tun: entered promiscuous mode [ 1033.253125][T18009] syz_tun: left promiscuous mode [ 1034.344980][T18018] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3821'. [ 1034.368024][T18018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1035.799234][ T5929] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1036.004796][ T5929] usb 1-1: config 0 has an invalid interface number: 59 but max is 0 [ 1036.004822][ T5929] usb 1-1: config 0 has no interface number 0 [ 1036.011526][ T5929] usb 1-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=6d.dd [ 1036.011554][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.011573][ T5929] usb 1-1: Product: syz [ 1036.011585][ T5929] usb 1-1: Manufacturer: syz [ 1036.011597][ T5929] usb 1-1: SerialNumber: syz [ 1036.036531][ T5929] usb 1-1: config 0 descriptor?? [ 1036.042265][ T5929] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 1036.129408][ T6687] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1036.259271][ T6687] usb 5-1: device descriptor read/64, error -71 [ 1036.631815][ T6687] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1036.697031][T18035] netlink: 'syz.0.3822': attribute type 1 has an invalid length. [ 1036.770544][T17667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1036.779338][ T6687] usb 5-1: device descriptor read/64, error -71 [ 1036.842855][T17667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1037.266899][ T6687] usb usb5-port1: attempt power cycle [ 1037.315272][T17667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1037.415175][T17667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1038.788571][T18045] bridge_slave_0: left allmulticast mode [ 1038.788606][T18045] bridge_slave_0: left promiscuous mode [ 1038.788884][T18045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.939594][T18045] bridge_slave_1: left allmulticast mode [ 1038.939629][T18045] bridge_slave_1: left promiscuous mode [ 1038.942962][T18045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.305226][T18045] bond0: (slave bond_slave_0): Releasing backup interface [ 1039.364817][ T2366] usb 1-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 1039.364844][ T2366] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 1039.398585][ T5929] usb 1-1: USB disconnect, device number 41 [ 1039.501289][T18045] bond0: (slave bond_slave_1): Releasing backup interface [ 1039.618244][T18045] team0: Port device team_slave_0 removed [ 1039.696277][T18045] team0: Port device team_slave_1 removed [ 1039.697328][T18045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1039.697359][T18045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.745966][T18045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.745999][T18045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.878855][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1039.896391][T18055] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1039.897815][T18055] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1039.898928][T18055] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1039.922742][T18055] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1040.076051][T18059] binder_alloc: 18056: binder_alloc_buf, no vma [ 1040.140488][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3833'. [ 1040.201948][T16028] syz_tun (unregistering): left promiscuous mode [ 1040.418611][T18058] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3832'. [ 1040.424324][T18058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1040.435229][T18062] syz_tun: entered promiscuous mode [ 1040.438845][T18062] syz_tun: left promiscuous mode [ 1042.039293][T15041] Bluetooth: hci0: command tx timeout [ 1042.247335][T18078] netlink: 'syz.2.3837': attribute type 1 has an invalid length. [ 1042.247359][T18078] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3837'. [ 1042.819328][T16994] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1043.678858][T18071] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 1043.678881][T18071] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 18071, name: syz.4.3836 [ 1043.678900][T18071] preempt_count: 0, expected: 0 [ 1043.678910][T18071] RCU nest depth: 0, expected: 0 [ 1043.678930][T18071] 1 lock held by syz.4.3836/18071: [ 1043.678942][T18071] #0: ffff888027c20058 (&dum_hcd->dum->lock){+.+.}-{3:3}, at: dummy_dequeue+0x164/0x480 [ 1043.679008][T18071] irq event stamp: 1708 [ 1043.679016][T18071] hardirqs last enabled at (1707): [] _raw_spin_unlock_irq+0x23/0x50 [ 1043.679052][T18071] hardirqs last disabled at (1708): [] dummy_dequeue+0x151/0x480 [ 1043.679081][T18071] softirqs last enabled at (276): [] __local_bh_enable_ip+0x1a4/0x270 [ 1043.679111][T18071] softirqs last disabled at (270): [] release_sock+0x2f/0x210 [ 1043.679158][T18071] CPU: 1 UID: 0 PID: 18071 Comm: syz.4.3836 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1043.679178][T18071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1043.679197][T18071] Call Trace: [ 1043.679206][T18071] [ 1043.679215][T18071] dump_stack_lvl+0x189/0x250 [ 1043.679244][T18071] ? release_sock+0x2f/0x210 [ 1043.679268][T18071] ? release_sock+0x2f/0x210 [ 1043.679295][T18071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1043.679332][T18071] ? print_lock_name+0xde/0x100 [ 1043.679359][T18071] __might_resched+0x44b/0x5d0 [ 1043.679388][T18071] ? __pfx___might_resched+0x10/0x10 [ 1043.679411][T18071] ? dummy_dequeue+0x164/0x480 [ 1043.679451][T18071] rt_spin_lock+0xc7/0x2c0 [ 1043.679474][T18071] ? _raw_spin_unlock_irq+0x23/0x50 [ 1043.679504][T18071] ? __pfx_rt_spin_lock+0x10/0x10 [ 1043.679540][T18071] ? rcu_is_watching+0x15/0xb0 [ 1043.679574][T18071] dummy_dequeue+0x164/0x480 [ 1043.679606][T18071] ? __pfx_dummy_dequeue+0x10/0x10 [ 1043.679628][T18071] ? __pfx_schedule_timeout+0x10/0x10 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 1043.679656][T18071] ? __pfx___wait_for_common+0x10/0x10 [ 1043.679700][T18071] usb_ep_dequeue+0x66/0x250 [ 1043.679729][T18071] raw_process_ep0_io+0x435/0x980 [ 1043.679765][T18071] raw_ioctl+0x22f6/0x3ba0 [ 1043.679793][T18071] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1043.679820][T18071] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1043.679847][T18071] ? do_vfs_ioctl+0xbeb/0x1440 [ 1043.679874][T18071] ? __pfx_raw_ioctl+0x10/0x10 [ 1043.679899][T18071] ? __pfx_smack_log+0x10/0x10 [ 1043.679931][T18071] ? smk_access+0x14c/0x4e0 [ 1043.679968][T18071] ? smk_tskacc+0x2fc/0x370 [ 1043.680004][T18071] ? smack_file_ioctl+0x24d/0x340 [ 1043.680029][T18071] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1043.680062][T18071] ? __fget_files+0x2a/0x420 [ 1043.680088][T18071] ? __fget_files+0x3a6/0x420 [ 1043.680114][T18071] ? __fget_files+0x2a/0x420 [ 1043.680146][T18071] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1043.680170][T18071] ? __pfx_raw_ioctl+0x10/0x10 [ 1043.680195][T18071] __se_sys_ioctl+0xff/0x170 [ 1043.680220][T18071] do_syscall_64+0xfa/0x3b0 [ 1043.680237][T18071] ? lockdep_hardirqs_on+0x9c/0x150 [ 1043.680266][T18071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.680286][T18071] ? clear_bhb_loop+0x60/0xb0 [ 1043.680311][T18071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.680335][T18071] RIP: 0033:0x7f956e74e7ab [ 1043.680354][T18071] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1043.680371][T18071] RSP: 002b:00007f956c971f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1043.680392][T18071] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f956e74e7ab [ 1043.680407][T18071] RDX: 00007f956c971fd0 RSI: 0000000040085503 RDI: 0000000000000006 [ 1043.680422][T18071] RBP: 00007f956c972fe0 R08: 0000000000000080 R09: 00007f956c971fd8 [ 1043.680436][T18071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 1043.680449][T18071] R13: 0000000800000000 R14: 0000000000000012 R15: 00007f956e7dd391 [ 1043.680482][T18071] [ 1044.109268][T15041] Bluetooth: hci0: command tx timeout [ 1045.586203][ T3560] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.494026][ T3560] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.687590][ T3560] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.901815][ T3560] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.190994][ T3560] bridge_slave_1: left allmulticast mode [ 1047.191018][ T3560] bridge_slave_1: left promiscuous mode [ 1047.193232][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.260946][ T3560] alle: left allmulticast mode [ 1047.260977][ T3560] alle: left promiscuous mode [ 1047.261236][ T3560] bridge0: port 1(alle) entered disabled state [ 1049.415199][ T3560] bond0 (unregistering): left promiscuous mode [ 1049.415221][ T3560] bond_slave_0: left promiscuous mode [ 1049.415468][ T3560] bond_slave_1: left promiscuous mode [ 1049.599872][ T3560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1049.680080][ T3560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1049.724953][ T3560] bond0 (unregistering): Released all slaves [ 1049.839453][ T3560] tipc: Left network mode [ 1050.909516][ T3560] hsr_slave_0: left promiscuous mode [ 1050.952047][ T3560] hsr_slave_1: left promiscuous mode [ 1050.952671][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.952698][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.981806][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.981839][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.084240][ T3560] veth1_macvtap: left promiscuous mode [ 1051.084367][ T3560] veth0_macvtap: left promiscuous mode [ 1051.084656][ T3560] veth1_vlan: left promiscuous mode [ 1051.084870][ T3560] veth0_vlan: left promiscuous mode [ 1053.599905][ T3560] team0 (unregistering): Port device team_slave_1 removed